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CLAIMS 



1 . A communication device comprising: 
a storing means for storing data; 
5 an obtaining means for obtaining a program using a method for 

accessing data; 

an executing means for executing said program, and, in accordance 
with said program, using data which said program is permitted to use; 

a specifying means for specifying, from among data stored in said 
10 storing means, data which is required to be used by said program; 

a selecting means for selecting from either an imperfect 
encapsulated object or a perfect encapsulated object for said program, the 
imperfect encapsulated object being an object utilizing a method to 
provide data included in the object to a program which accesses the object, 
15 and the perfect encapsulated object being an object not utilizing the 
method; 

an object generating means for generating, in accordance with the 
selection made by said selecting means, either an imperfect encapsulated 
object or a perfect encapsulated object for said program, the generated 
20 object including the data specified by said specifying means; and 

an access control means for controlling access to the data specified 
by said specifying means, and for permitting said executing means to 
access the data only via the object generated for said program by said 
object generating means. 

25 

2. A communication device according to Claim 1, 

wherein said program includes information indicating reliability of said 

program, and said selecting means selects said object on the basis of the 

information. 
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3. A communication device according to Claim 1, wherein: said 
program includes first information indicating a security level required for 
said data, and second information indicating reliability of said program; 

5 said selecting means selects said object on the basis of the first 
information; and 

said access control means determines whether said object is used by said 
executing means for accessing said data on the basis of the second 
information. 

10 

4. A communication device according to Claim 1, 

wherein both said imperfect encapsulated object and said perfect 
encapsulated object are permitted by said execution means to be used in 
the case that reliability of said program is high, and only said perfect 
15 encapsulated object is permitted by said execution means to be used in 
the case that reliability of said program is medium, and neither said 
imperfect encapsulated object nor said perfect encapsulated object is 
permitted by said execution means to be used in the case that reliability of 
said program is low. 

20 

5 A communication device according to Claim 1, wherein: 

said program includes first information indicating a security level 
required for said data, and second information indicating reliability of said 
program; 

25 said selection means selects said object on the basis of the first 
information and the second information; and 

said access control means determines whether said object is used by said 
executing means for accessing said data on the basis of the second 
information. 
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6 A communication device according to Claim 1, 
wherein said communication device further comprises a deleting means 
for deleting said object generated by said generating means at the time of 
terminating execution of said program. 



